Skip to content

Commit 1014d89

Browse files
authored
Merge pull request #306515 from abhishjain002/patch-9
Removed the note for non public clouds
2 parents f15ce8e + 510de2f commit 1014d89

1 file changed

Lines changed: 14 additions & 18 deletions

File tree

articles/hdinsight/use-managed-identity-for-sql-database-authentication-in-azure-hdinsight.md

Lines changed: 14 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -6,17 +6,16 @@ ms.topic: how-to
66
author: abhishjain002
77
ms.author: abhishjain
88
ms.reviewer: nijelsf
9-
ms.date: 03/31/2025
9+
ms.date: 10/06/2025
1010
---
1111

12-
# Use Managed Identity for SQL Database authentication in Azure HDInsight
12+
# Use managed identity for SQL database authentication in Azure HDInsight
1313

14+
HDInsight added the Managed Identity (MI) option for authenticating SQL databases within its cluster offerings and providing a more secure authentication mechanism.
1415

15-
HDInsight added the Managed Identity option for authenticating SQL databases within its cluster offerings and providing a more secure authentication mechanism.
16+
This article outlines the process of using the Managed Identity option for SQL database authentication when creating an HDInsight cluster.
1617

17-
This article outlines the process of using the Managed Identity (MSI) option for SQL Database authentication when creating an HDInsight cluster.
18-
19-
The Managed Identity (MI) option is available for the following Databases:
18+
The managed identity option is available for the following databases:
2019

2120
| Databases | Host on Behalf of (HoBo) DB | Bring Your Own (BYO) DB |
2221
|-|-|-|
@@ -25,35 +24,32 @@ The Managed Identity (MI) option is available for the following Databases:
2524
|Oozie |||
2625
|Ranger (ESP)|||
2726

28-
> [!NOTE]
29-
> * Managed Identity (MI) is currently available only in public regions. It will be rolled out to other regions (Federal and China regions) in future releases.
30-
> * MI option isn't enabled by default. To get it enabled, submit a [support ticket](https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade/overview) with your subscription and region details.
3127

3228
> [!IMPORTANT]
33-
> * It's recommended not to update the Managed Identity after cluster recreation as it can disrupt cluster operation.
34-
> * When you recreate an MSI with the same name, you must recreate the contained user and reassign roles, as the new MSI will have different object and client IDs even if the name remains unchanged.
29+
> * It's recommended not to update the managed identity after cluster recreation as it can disrupt cluster operation.
30+
> * When you recreate a managed identity with the same name, you must recreate the contained user and reassign roles, as the new managed identity have different object ID and client ID even if the name remains unchanged.
3531
36-
## Steps to Use Managed Identity during cluster creation in Azure portal
32+
## Steps to use managed identity during cluster creation in Azure portal
3733

38-
1. During cluster creation, navigate to the Storage section and select the SQL database for Ambari/Hive/Oozie. Choose Managed Identity as the Authentication method.
34+
1. During cluster creation, navigate to the Storage section and select the SQL database for Ambari/Hive/Oozie. Choose managed identity as the authentication method.
3935

4036
:::image type="content" source="./media/use-managed-identity-for-sql-database-authentication-in-azure-hdinsight/basic-tab.png" alt-text="Screenshot showing the basic tab." border="true" lightbox="./media/use-managed-identity-for-sql-database-authentication-in-azure-hdinsight/basic-tab.png":::
4137

42-
1. Select the Managed Identity to authenticate with SQL Database.
38+
1. Select the managed identity to authenticate with the SQL database.
4339

4440
:::image type="content" source="./media/use-managed-identity-for-sql-database-authentication-in-azure-hdinsight/storage-tab.png" alt-text="Screenshot showing the storage tab." border="true" lightbox="./media/use-managed-identity-for-sql-database-authentication-in-azure-hdinsight/storage-tab.png":::
4541

46-
1. Create a contained user with the Managed identity in the corresponding SQL database.
42+
1. Create a contained user with the managed identity in the corresponding SQL database.
4743

4844
Follow these steps in the Azure SQL database query editor to create a database user and grant it read-write permissions. Perform these steps for each SQL Database you're going to use for different services such as Ambari, Hive, or Oozie.
4945

5046

5147
> [!NOTE]
52-
> User name must contain the original MSI name extended by a user-defined suffix. As best practice, the suffix can include an initial part of its Object ID.
48+
> User name must contain the original managed identity name extended by a user-defined suffix. As best practice, the suffix can include an initial part of its Object ID.
5349
Object ID of managed identity can be obtained from portal on the managed identity portal page.
5450
>
5551
> For example:
56-
> * MSI Name: contosoMSI
52+
> * MI Name: contosoMSI
5753
> * Object ID: `aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb`
5854
> * user_name could be `contosoMSI_aaaaaaaa`
5955
@@ -83,4 +79,4 @@ Object ID of managed identity can be obtained from portal on the managed identit
8379
ALTER ROLE db_view_def ADD MEMBER {user_name};
8480
```
8581

86-
1. After entering the necessary details, proceed with Cluster creation on the portal.
82+
1. After entering the necessary details, proceed with cluster creation on the portal.

0 commit comments

Comments
 (0)